Role-based access control for SnapCenter Plug-in for VMware vSphere

SnapCenter Plug-in for VMware vSphere provides an additional level of RBAC for managing virtualized resources. SnapCenter Plug-in for VMware vSphere supports both vCenter Server RBAC and Data ONTAP RBAC.

The Plug-in for VMware vSphere ships with predefined vCenter roles. You must add these roles to vCenter Active Directory users to perform SnapCenter operations on the vCenter GUI. You cannot change the permissions of the SnapCenterAdmin role.

You can create and modify roles, and add resource access to users at any time. However, when you are setting up SnapCenter and the Plug-in for VMware vSphere for the first time, you should at least add Active Directory users or groups to roles, and then add resource access to those users or groups.

Note that user or group accounts are not created using SnapCenter, but are created in the Active Directory in the operating system or database.